收口审计治理与套餐任务进展

Constraint: 在线热修前必须保存当前迭代分支全部有效代码进展
Confidence: medium
Scope-risk: broad
Directive: 后续修改需保持审计事件与业务事务边界一致
Tested: git diff --cached --check
Not-tested: 未运行全量测试，提交用于切换分支前保存既有工作

cmd/worker/main.go

@@ -22,6 +22,7 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/bootstrap"
 	"github.com/break/junhong_cmp_fiber/internal/gateway"
 	approvalInfra "github.com/break/junhong_cmp_fiber/internal/infrastructure/approval"
+	auditInfra "github.com/break/junhong_cmp_fiber/internal/infrastructure/audit"
 	cardObservationInfra "github.com/break/junhong_cmp_fiber/internal/infrastructure/cardobservation"
 	"github.com/break/junhong_cmp_fiber/internal/infrastructure/integrationlog"
 	"github.com/break/junhong_cmp_fiber/internal/infrastructure/messaging/outbox"
@@ -319,6 +320,10 @@ func initWorkerRuntime(ctx context.Context, cfg *config.Config, appLogger *zap.L
 
 // registerWeComApprovalOutboxConsumer 注册企业微信审批提交和标准终态业务消费者。
 func registerWeComApprovalOutboxConsumer(runtime *workerRuntime, cfg *config.Config, appLogger *zap.Logger) {
+	auditWriter, ok := runtime.workerResult.Services.PaymentAudit.(*auditInfra.Writer)
+	if !ok || auditWriter == nil {
+		appLogger.Fatal("通用审批统一审计 Writer 未配置")
+	}
 	applicationRepository := wecomInfra.NewApplicationRepository(runtime.db)
 	integrationRepository := integrationlog.NewRepository(runtime.db)
 	tokenProvider := wecomInfra.NewTokenProvider(
@@ -326,7 +331,7 @@ func registerWeComApprovalOutboxConsumer(runtime *workerRuntime, cfg *config.Con
 		cfg.WeCom.BaseURL, cfg.WeCom.Timeout, appLogger,
 	)
 	consumer := wecomInfra.NewApprovalSubmissionConsumer(
-		wecomInfra.NewApprovalContextRepository(runtime.db),
+		wecomInfra.NewApprovalContextRepository(runtime.db, auditWriter),
 		wecomInfra.NewApprovalSubmissionClient(tokenProvider, integrationRepository, cfg.WeCom.BaseURL, cfg.WeCom.Timeout),
 		wecomInfra.NewApprovalAttachmentUploader(tokenProvider, integrationRepository, runtime.storageSvc, cfg.WeCom.BaseURL, cfg.WeCom.Timeout),
 	)
@@ -339,7 +344,7 @@ func registerWeComApprovalOutboxConsumer(runtime *workerRuntime, cfg *config.Con
 		owner = fmt.Sprintf("worker-%d", os.Getpid())
 	}
 	walletPosting := walletApp.NewPostingService(
-		walletInfra.NewCreditEventWriter(outbox.NewRepository()),
+		walletInfra.NewCreditEventWriter(outbox.NewRepository(), auditInfra.NewWriter(auditInfra.NewRegistry(), nil)),
 		nil,
 	)
 	stopResumeService, _ := runtime.workerResult.Services.StopResumeService.(*iot_card_svc.StopResumeService)
@@ -362,10 +367,11 @@ func registerWeComApprovalOutboxConsumer(runtime *workerRuntime, cfg *config.Con
 		walletApp.NewRefundService(walletInfra.NewRefundEventWriter(outbox.NewRepository()), nil),
 	)
 	refundService.SetNotificationOutbox(outbox.NewRepository())
+	refundService.SetLifecycleAudit(auditWriter)
 	decisionDispatcher := approvalApp.NewDecisionDispatcher(
 		approvalInfra.NewDecisionDeliveryStore(runtime.db),
 		map[string]approvalApp.BusinessDecisionHandler{
-			constants.ApprovalBusinessTypeOfflineRecharge: agentrechargeApp.NewApprovalDecisionHandler(runtime.db, walletPosting),
+			constants.ApprovalBusinessTypeOfflineRecharge: agentrechargeApp.NewApprovalDecisionHandler(runtime.db, walletPosting, runtime.workerResult.Services.RechargeAudit),
 			constants.ApprovalBusinessTypeRefund:          refundService,
 		},
 		owner,
@@ -381,6 +387,10 @@ func registerWeComApprovalOutboxConsumer(runtime *workerRuntime, cfg *config.Con
 
 // registerWeComApprovalTasks 注册企微权威详情同步和主动恢复任务。
 func registerWeComApprovalTasks(mux *asynq.ServeMux, runtime *workerRuntime, cfg *config.Config, appLogger *zap.Logger) {
+	auditWriter, ok := runtime.workerResult.Services.PaymentAudit.(*auditInfra.Writer)
+	if !ok || auditWriter == nil {
+		appLogger.Fatal("通用审批统一审计 Writer 未配置")
+	}
 	applicationRepository := wecomInfra.NewApplicationRepository(runtime.db)
 	integrationRepository := integrationlog.NewRepository(runtime.db)
 	tokenProvider := wecomInfra.NewTokenProvider(
@@ -392,7 +402,8 @@ func registerWeComApprovalTasks(mux *asynq.ServeMux, runtime *workerRuntime, cfg
 		approvalInfra.NewTerminalEventWriter(outbox.NewRepository()),
 		approvalInfra.NewDecisionDeliveryStore(runtime.db), nil,
 	)
-	contexts := wecomInfra.NewApprovalContextRepository(runtime.db)
+	decisionSync.SetAuditWriter(auditWriter)
+	contexts := wecomInfra.NewApprovalContextRepository(runtime.db, auditWriter)
 	detailHandler := wecomInfra.NewApprovalDetailTaskHandler(
 		wecomInfra.NewApprovalDetailClient(tokenProvider, integrationRepository, cfg.WeCom.BaseURL, cfg.WeCom.Timeout),
 		contexts, decisionSync, integrationRepository,
@@ -414,12 +425,14 @@ func registerAgentRechargeRecoveryTask(mux *asynq.ServeMux, runtime *workerRunti
 	confirm := agentrechargeApp.NewConfirmOnlinePaymentService(
 		runtime.db,
 		paymentInfra.NewAgentRechargePaymentEventWriter(outbox.NewRepository()),
+		runtime.workerResult.Services.PaymentAudit,
 	)
 	recovery := agentrechargeApp.NewRecoverOnlinePaymentService(
 		runtime.db,
 		paymentInfra.NewWechatWebAdapter(wechat.NewRedisCache(runtime.redisClient), integration, appLogger),
 		paymentInfra.NewAlipayWapAdapter(integration, appLogger),
 		confirm,
+		runtime.workerResult.Services.PaymentAudit,
 	)
 	handler := paymentInfra.NewAgentRechargeRecoveryTaskHandler(recovery)
 	mux.HandleFunc(constants.TaskTypeAgentRechargeRecovery, handler.Handle)
@@ -468,8 +481,8 @@ func registerCardObservationOutboxConsumer(runtime *workerRuntime, appLogger *za
 
 // registerWalletOutboxConsumer 注册代理主钱包资金事实消费者。
 func registerWalletOutboxConsumer(runtime *workerRuntime, appLogger *zap.Logger) {
-	agentRechargePosting := walletApp.NewPostingService(walletInfra.NewCreditEventWriter(outbox.NewRepository()), nil)
-	agentRechargeConsumer := paymentInfra.NewAgentRechargePaymentConsumer(runtime.db, agentRechargePosting)
+	agentRechargePosting := walletApp.NewPostingService(walletInfra.NewCreditEventWriter(outbox.NewRepository(), auditInfra.NewWriter(auditInfra.NewRegistry(), nil)), nil)
+	agentRechargeConsumer := paymentInfra.NewAgentRechargePaymentConsumer(runtime.db, agentRechargePosting, runtime.workerResult.Services.RechargeAudit)
 	if err := runtime.outboxConsumers.Register(constants.OutboxEventTypeAgentRechargePaymentConfirmed, agentRechargeConsumer); err != nil {
 		appLogger.Fatal("注册代理在线充值入账 Outbox 消费者失败",
 			zap.String("event_type", constants.OutboxEventTypeAgentRechargePaymentConfirmed), zap.Error(err))
@@ -502,7 +515,7 @@ func registerNotificationOutboxConsumer(runtime *workerRuntime, appLogger *zap.L
 	registry := notificationInfra.NewRegistry()
 	shopRecipientResolver := shopInfra.NewRecipientResolver(runtime.db)
 	dynamicRecipientResolver := notificationInfra.NewDynamicRecipientResolver(runtime.db, shopRecipientResolver)
-	consumer := notificationApp.NewDeliveryService(repository, registry, dynamicRecipientResolver, appLogger)
+	consumer := notificationApp.NewDeliveryService(repository, registry, dynamicRecipientResolver, appLogger, auditInfra.NewWriter(auditInfra.NewRegistry(), nil))
 	if err := runtime.outboxConsumers.Register(constants.OutboxEventTypeAdminDirectNotification, consumer); err != nil {
 		appLogger.Fatal("注册站内通知 Outbox 消费者失败",
 			zap.String("event_type", constants.OutboxEventTypeAdminDirectNotification), zap.Error(err))
@@ -629,6 +642,7 @@ func startPollingScheduler(
 	)
 	trafficSyncer.SetRedisClient(runtime.redisClient)
 	trafficSyncer.SetCardObservationService(runtime.workerResult.Services.CardObservation)
+	trafficSyncer.SetSpeedTierIntegrationLog(integrationlog.NewRepository(runtime.db))
 	activationHandler.SetTrafficSyncer(trafficSyncer)
 
 	pollingScheduler := polling.NewScheduler(